This plugin hasn’t been tested with the latest 3 major releases of WordPress. It may no longer be maintained or supported and may have compatibility issues when used with more recent versions of WordPress.

WH Tweaks


Often times, ideas from WordPress Ideas ( or bugs from WordPress Trac ( take years to make it into WordPress Core. Sometimes even if everyone agrees on the fix it still doesn’t get in. This plugin is the temporary patch you’ve been waiting for. Activate any feature you want and disable any you don’t want.

  • Allow excerpts to show links.
  • Obscure login errors so an attacker will not know if a username exists.
  • Hide WordPress version in both meta tags and script inclusions.
  • Make category children highlighted with a subtle gray background.
  • Some added shortcodes.
  • Customize login.
  • Remove emoji scripts and styles.
  • Automatically set the Return-Path to the From address if it’s not already set (Trac #22837).
  • Show private pages in parent dropdowns (Trac #8592).
  • Allow commas in category terms (Trac #14691).
  • Show sidebar from main site in Multisite (Trac #22370).
  • Disable default WordPress REST API endpoints.
  • Remove author pages from public viewing.
  • Redirect user enumeration to 403 Forbidden page.
  • Resolve PHP notices about “ob_end_flush()” (Trac #18525 and #22430).

Each of these options can be turned on or off on the Settings -> WH Tweaks page.


This plugin provides 1 block.

  • WH Tweaks Container


February 7, 2017
Found this plugin by accident because it solves the 'Show private pages in Parent dropdowns' issue - which has been waiting for action for nearly 10 years. Worth it for this alone although it has several other useful features.
Read all 1 review

Contributors & Developers

“WH Tweaks” is open source software. The following people have contributed to this plugin.


Translate “WH Tweaks” into your language.

Interested in development?

Browse the code, check out the SVN repository, or subscribe to the development log by RSS.



Added option to resolve “PHP Notice: ob_end_flush(): failed to send buffer” and “PHP Notice: ob_end_flush(): failed to delete buffer”.
Removed option to add a block container. The WordPress editor has its own container block now. Block will continue to be available if already enabled.


Fixed links in excerpt causing warning when not in loop.


Updated login headertext filter.


Added block editor styling.
Added block container.


version bump.


Added option to add video container to embeded videos to allow videos to be responsive.


Fixed reset password error on some woocommerce installations.


Removed adding sender email to “replyto”. as this is not needed.


Added option to redirect user enumeration to 403 Forbidden page.
Removed From email option. let other plugins handle this.


Added option to remove author pages from public viewing.
Added option to adjust From name in the WordPress emails.


Added option to disable the default REST API endpoints.


Added option to show a static version of the main site’s sidebars on Multisite.


Added option to show private pages in parent dropdowns.
Added option to allow commas in category terms.
removed useless overwrite filter.


Fix php warning when obscuring wp version.


Prefix hex2rgb function.


Add option to automatically set the Return-Path when sending with wp_mail.


Allow excerpts to show links.


Initial release.